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B.) Amendments to the Claims 

1 1 . (Original) Ascalable media access portal providing connectivity to network 

2 attached data storage, said scalable media access portal comprising: 

3 a) a first network interface processor coupleable to a first network; 

4 b) a second network interface processor coupleable to second 

5 network; 

6 c) an array of media access processors including an assigned media 

7 access processor operative to terminate a first network media access connection 

8 relative to said first network and provides a second network media access 

9 connection relative to said second network as a proxy for said first network media 

10 access connection; and 

11 d) a switch providing data paths between said first and second 

1 2 network interface processors and said array of media access processors, wherein 

1 3 said first network interface processor is operative to selectively route network data 

1 4 associated with said first network media access connection from said first network 

15 to said assigned media access processor. 

1 2. (Amended) The scalable media access portal of Claim 1 wherein said first 

2 network media access connection is a state-full connection, wherein said assigned 

3 media access processor maintains state-data reflective of g t he d yn am i c state of 

4 said first network media access connection, and wherein said assigned media 

5 access processor is responsive to said state-data in maintaining said second 

6 network media access connection. 

1 3. (Original) The scalable media access portal of Claim 2 wherein assigned 

2 media access processor implements a transaction protocol state-machine to 

3 maintain said second network media access connection in a predetermined 

4 correspondence with said first network media access connection. 

1 4. (Original) The scalable media access portal of Claim 3 wherein the 

2 network data selectively routed by said first network interface processor include 

3 network media data packets containing information specific to the transport of 

4 media-level data and wherein said assigned media access processor inspects 

5 network media data packets to obtain said state-data. 
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1 5. (Original) The scalable media access portal of Claim 4 further comprising 

2 a shared state-data store accessible by said array of media access processors, 

3 wherein said array of media access processors selectively update said shared 

4 state-data store, and wherein said assigned media access processor is responsive 

5 to said state-data accessed from said shared state-data store in maintaining said 

6 second network media access connection. 



1 6. (Amended) The scalable media access portal of Claim 1 wherein network 

2 data associated with said first and second network media access connection 

3 includes network data packets encapsulating media-level data and wherein said 

4 assigned media access processor is operative to encrypt provi d es f or th e 

5 e ncryp t ion of media-level data within network data packets. 

1 7. (Amended) The scalable media access portal of Claim 6 wherein said 

2 assigned media access processor is operative to p r o vides fo r t h e proxy transfer of 

3 first network data packets from said first network media access connection to said 

4 second network media access connection as second network data packets, said 

5 assigned media access processor providing for the selective encryption of media- 

6 level data within said second network data packets based on a first t h e pr o xy 

7 determined destination of said second network data packets. 

1 8. (Amended) The scalable media access portal of Claim 7 wherein said 

2 assigned media access processor is operative to p r o vid e s fo r t he proxy transfer of 

3 said second network data packets from said second network media access 

4 connection to said first network media access connection as said first network data 

5 packets, said assigned media access processor providing for the selective 

6 decryption of media-level data from said second p re det ermi n e d network data 

7 packets. 

1 9. (Amended) The scalable media access portal of Claim 8 wherein said 

2 assigned media processor is operative to coordinate m a in ta ins c oo rdi nat e d the 

3 state of said first and second network media access connections to enable 

4 man a ge t h e proxy transfer of first and second network data packets between said 

5 first and second networks. 
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1 1 0. (Amended) The scalable media access portal of Claim 9 wherein said first 

2 and second network data packets include media data transport state information 

3 and wherein said assigned media processor is responsive to said media data 

4 transport state information to maintain the coordination of said first and second 

5 network media access connections. 



1 11. (Amended) A secure storage access portal provided in a network between 

2 client systems and network attached data storage, said secure storage access 

3 portal comprising: 

4 a) a data packet processor, including an encryption engine, operative to 

5 selectively encrypt a media data portion of network data packets provided to said 

6 data packet processor; and 

7 b) a network interface processor coupleable to a client network and a 

8 storage network and coupled to said data packet processor to transfer network 

9 data packets, said network interface processor operative to associate a persistent 

10 network data route between said client and storage networks through said data 

1 1 packet processor such that network data packets associated with said persistent 

1 2 network data route are selectively passed to and from said data packet processor 

13 by said network interface processo r, wherein said data media portion is media- 

14 level data provided for storage on a storage device coupled to said storage 

15 network. 



1 12. (Original) The secure storage access portal of Claim 1 1 further comprising 

2 a data packet processor array that includes said data packet processor, wherein 

3 said network interface processor is operative to selectively associate a plurality of 

4 persistent network data routes with said data packet processor. 

1 13. (Original) The secure storage access portal of Claim 12 wherein said 

2 plurality of persistent network data routes are uniquely associated with said data 

3 packet processor within said data packet processor array. 

1 14. (Original) The secure storage access portal of Claim 1 1 wherein said data 

2 packet processor is responsive to a header portion of a predetermined network 
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data packet to select an encryption key for use in encrypting said media data 
portion of said predetermined network data packet. 



1 1 5. (Original) The secure storage access portal of Claim 1 4 wherein said data 

2 packet processor is responsive to an identification of a data storage resource 

3 provided by said predetermined network data packet to select said encryption key. 

1 1 6. (Original) A secure storage access portal providing for the routing of data 

2 transfer requests and responses between network clients and storage servers, said 

3 network media access controller comprising: 

4 a) first network interface processor coupleable to a client network; 

5 b) second network interface processor coupleable to a data storage 

6 network; 

7 c) a plurality of data packet processors coupled to said first and second 

8 network interface processors, wherein each said data packet processor is 

9 operative to terminate respective client network connections routed to said 

1 0 plurality of data packet processors through said first network interface processor 

1 1 and to establish respective storage network connections through said second 

12 network interface processor, wherein each said data packet processor provides 

1 3 for the proxy transport of data transfer requests and responses between said client 

14 and storage network connections, and wherein each said data packet processor 

15 includes an encryption engine operative to selectively encrypt media-level data 

16 contained within data transfer requests and responses as transported from said 

1 7 client network connections to said storage network connections. 

1 1 7. (Original) The secure storage access portal of Claim 1 6 further comprising 

2 a data switch provided to separately connect said first and second network 

3 interface processors with said plurality of data packet processors. 

1 1 8. (Original) The secure storage access portal of Claim 1 7 further comprising 

2 a data store accessible by said plurality of data packet processors. 

1 19. (Amended) The secure storage access portal of Claim 18 wherein 

2 predetermined client network connections are associated as a connection session, 

3 wherein instances of said predetermined client network connections are 
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4 terminated respectively by first and second data packet processors, wherein said 

5 first data packet processor is operative to provide predetermined session 

6 connection data to said data store and said second data packet processor is 

7 operative to retrieve said predetermined session connection data from said data 

8 store. 

1 20. (Original) The secure storage access portal of Claim 1 9 wherein said first 

2 and second network interface processors are responsive to network data packets 

3 received from said client and storage networks, said first and second network 

4 interface processors being operative to associate network data packets with said 

5 client and storage network connections and correspondingly route network data 

6 packets to the respective said data packet processors associated with said client 

7 and storage network connections. 

1 21. (Original) The secure storage access portal of Claim 20 further comprising 

2 a control processor coupled through said data switch to said first and second 

3 network interface processors and said plurality of data packet processors, said 

4 data store being coupled to and accessible by said plurality of data packet 

5 processors through said control processor. 

1 22. (Original) A method of providing secure storage of media-level data as 

2 transported over a network within network data packets that encapsulate data 

3 storage packets, wherein data storage packets include storage commands, said 

4 method comprising the steps of: 

5 a) establishing a network connection route for network data packets 

6 provided from a first network through a network data packet processor to a 

7 second network; 

8 b) first processing a network data packet provided through said network 

9 connection route to determine a storage command contained within said network 

10 storage packet; 

1 1 c) second processing said network data packet to determine a storage 

12 target resource from a data storage packet encapsulated by said network data 

13 packet; and 
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14 cl) filtering, selectively based on a determined correspondence between 

15 said storage command and said storage target resource, the transport of said 

16 network data packet from said network connection route. 

1 23. (Original) The method of Claim 22 further comprising the steps of: 

2 a) locating within said data storage packet, selectively based on said 

3 storage command, media-level data; and 

4 b) encrypting, selectively based on said storage target resource, the media- 

5 level data. 

1 24. (Original) The method of Claim 23, prior to the step of encrypting, further 

2 comprising the step of compressing the media-level data, selectively based on 

3 said storage target resource. 

1 25. (Original) The method of Claim 24 wherein said second processing step 

2 includes the step of redirecting said network data packet from said storage target 

3 resource to an alternate storage target resource. 

1 26. (Original) The method of Claim 22 wherein said network data packet 

2 processor is one of a plurality of network data packet processors, wherein said 

3 step of establishing includes establishing respective network connection routes 

4 through said plurality of network data packet processors. 

1 27. (Original) The method of Claim 26 wherein said respective network 

2 connection routes are persistently established through said plurality of network 

3 data packet processors. 

1 28. (Original) The method of Claim 27 further comprising the step of third 

2 processing said network data packet to determine the selection of said network 

3 connection route from said respective network connection routes. 

1 29. (Original) The method of Claim 28 further comprising the steps of: 

2 a) locating within said data storage packet, selectively based on said 

3 storage command, media-level data; and 
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4 b) encrypting, selectively based on said storage target resource, the media- 

5 level data. 

1 30. (Original) The method of Claim 29, prior to the step of encrypting, further 

2 comprising the step of compressing the media-level data, selectively based on 

3 said storage target resource. 

1 31 . (Original) The method of Claim 30 wherein said second processing step 

2 includes the step of redirecting said network data packet from said storage target 

3 resource to an alternate storage target resource. 
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